Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa
File:                     71d70320-47a7-34ad-bc0e-65f795016969.roa (raw, json)
Hash identifier:          n9tgzx+/HMYWH1TmDUe1dBPqZXXNwZ2o9LlhymwQStU=
Subject key identifier:   7A:95:F7:4A:7B:0E:4E:EB:8F:22:F6:D0:08:D6:11:C5:18:A9:E7:6B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5256DF366D34AA7639B680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        2605:a401:8004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:56:df:36:6d:34:aa:76:39:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=a203ddfe-af4b-4d36-aa5f-41e504ab884e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:51:f7:4d:b0:9e:e7:42:d5:01:bf:53:92:
                    ae:36:f6:c9:e8:42:36:55:a6:69:7e:16:9a:71:ae:
                    2a:b8:bb:8b:ef:8c:f9:c0:c7:0d:13:71:8f:29:7a:
                    f8:ce:05:bb:22:02:72:dc:b3:ff:23:42:d3:17:a7:
                    cd:20:66:da:d8:5d:8a:d8:b3:87:02:b7:ca:c7:e0:
                    8a:4f:8f:f3:b9:a8:e1:a1:53:cd:50:31:98:91:4a:
                    86:6c:e9:af:b8:ff:3d:a6:0f:e8:63:78:c4:d4:5a:
                    a0:2b:a0:d3:6e:d8:b1:ed:d7:3a:98:43:a7:68:1f:
                    be:91:42:6a:b8:d2:7f:c1:92:f1:2a:a0:3a:2e:98:
                    92:4d:2b:06:83:a6:63:a9:9e:4c:cf:be:f6:b0:a3:
                    65:bc:58:f4:0b:fd:d4:e7:b1:2f:5d:3b:12:38:1c:
                    7d:e3:9d:d0:52:86:c1:ee:5e:fb:93:e9:c4:4b:a1:
                    c1:40:3e:b4:b5:85:32:d9:d2:95:e4:52:8b:e9:4e:
                    d8:96:88:df:8b:d8:f1:fa:9f:95:48:70:65:2c:3a:
                    ed:31:d5:4f:06:3e:f2:8c:17:7b:71:af:94:a0:bf:
                    16:89:b1:60:19:72:d6:89:69:c0:ef:60:49:aa:f4:
                    14:d3:37:be:f3:8d:ed:17:b7:8a:0e:16:c9:94:6b:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:95:F7:4A:7B:0E:4E:EB:8F:22:F6:D0:08:D6:11:C5:18:A9:E7:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/71d70320-47a7-34ad-bc0e-65f795016969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:6b:6d:2b:99:a5:8d:cf:c5:f0:57:53:6a:91:58:c0:53:
         df:93:46:4e:22:79:2e:6a:2d:29:02:04:30:ef:96:b3:7b:09:
         b3:24:4c:0f:af:87:d8:a9:55:a3:fb:76:5a:bb:b4:53:ec:25:
         f9:87:34:6c:92:3e:10:91:9d:2a:f8:11:f8:38:6f:07:04:ac:
         2f:fe:a8:13:70:be:ac:e1:6a:f9:b2:a7:4d:2f:8f:e9:37:42:
         da:95:0b:f5:e5:db:e7:e3:de:36:4b:6e:70:15:ca:89:1b:b6:
         18:7c:db:48:2d:96:af:0a:8e:01:37:f8:d4:bc:bb:26:76:45:
         23:6a:a2:56:5e:36:f7:6f:c6:4b:c0:b1:65:13:f6:11:4e:f4:
         d6:ba:8f:32:b2:11:af:24:32:d0:c3:8c:d7:5c:99:5f:1d:a4:
         df:16:68:f4:72:c9:6e:74:6a:7a:96:8c:b3:3c:33:5f:73:a4:
         9d:c4:b4:4d:eb:74:bc:8c:5e:cb:d6:9d:eb:21:66:6e:02:05:
         58:09:57:02:bb:01:d9:ea:87:ae:e6:fd:96:6e:f9:c1:36:d3:
         36:bc:d3:5a:3b:60:30:8a:6b:0a:f0:35:cf:16:bd:0d:ab:3f:
         13:d6:30:31:f6:4c:b5:32:04:10:5d:c3:0c:05:16:db:60:6a:
         08:6b:9a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:11:56 2025 by rpki-client